There is no silver bullet for prompt injection, but `sig` addresses one of the most tricky challenges:
LLMs are dealing with a wall of text. Distinctions between trusted instructions and untrusted text are flimsy at best.
By involving the model, we can add texture to make trust boundaries clearer.
